Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json)
Hash identifier: sAtErct8NLuiiXOiuD6RIKJml1WXNZmJpHE6rsgmukA=
Subject key identifier: 37:8C:98:E6:BE:46:D2:4C:CE:A3:5D:D7:AD:A6:FE:3B:45:37:AA:22
Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Certificate serial: 019CAC0FA131B57943F792C489E706B3D69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
Manifest number: 0EFD
Signing time: Mon 02 Mar 2026 01:00:31 +0000
Manifest this update: Mon 02 Mar 2026 01:00:31 +0000
Manifest next update: Tue 03 Mar 2026 01:00:31 +0000
Files and hashes: 1: YuHJmYFCnAz2SSKMxUmvTY991CE.roa (hash: TOD8ARSMl4ubAqj2aurWlfEhx3SyaroxCxGERNtBcZQ=)
2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: 1ud92fY0wg66H6kxAcD1iHD/cWpDHi7BK7GaD/dfIWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a1:31:b5:79:43:f7:92:c4:89:e7:06:b3:d6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e
Validity
Not Before: Mar 2 01:00:31 2026 GMT
Not After : Mar 3 01:00:31 2026 GMT
Subject: CN=378c98e6be46d24ccea35dd7ada6fe3b4537aa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:9c:2c:7e:dd:2d:66:e2:00:76:bf:d9:97:
3d:c3:76:c5:c3:f5:63:7c:b3:a9:65:64:80:14:17:
ea:ac:bd:a5:07:60:54:1e:bc:8b:f2:e4:d8:07:6e:
5a:99:6b:50:f4:94:84:17:3e:e1:76:ec:f3:e6:95:
01:f1:f6:48:da:4b:f5:d2:6f:dd:59:e1:42:c7:b1:
75:3c:82:c0:7e:bd:d3:9b:43:2c:27:a0:6c:d5:95:
77:ca:92:f2:2f:09:76:eb:f0:93:3e:8f:7d:b0:cb:
9a:76:e0:9a:75:7c:18:d0:1a:53:84:04:70:94:56:
e2:78:0b:11:95:e4:11:ea:97:ac:9e:f9:c9:a2:da:
9f:75:99:be:1c:4a:50:58:92:bd:ca:f3:f8:5b:25:
4b:6e:83:5d:12:99:8f:dd:15:45:01:07:08:01:76:
80:7b:30:f0:7f:d6:ff:f5:63:d6:02:52:1a:2f:af:
e1:d5:b7:ba:7b:b4:c1:ed:b1:d4:f1:a8:ca:d8:ba:
b9:7e:9b:ca:67:60:9e:0d:9e:a9:db:b7:3e:0b:54:
cf:05:fa:90:c9:59:3b:bc:54:05:a9:0e:06:5f:04:
b1:ce:56:60:57:c2:39:2b:06:71:c9:cd:63:b1:1a:
29:21:53:c1:25:9f:80:3a:c9:3c:ad:b1:66:db:bd:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8C:98:E6:BE:46:D2:4C:CE:A3:5D:D7:AD:A6:FE:3B:45:37:AA:22
X509v3 Authority Key Identifier:
keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b8:4c:d4:46:eb:69:7c:d9:93:88:30:28:c1:90:13:d7:a3:
17:c6:70:2f:23:5a:39:c4:44:13:8d:a0:bd:ac:15:e4:5d:61:
5d:17:0a:bf:99:aa:ed:24:60:2e:39:00:be:10:25:f1:0d:05:
7a:db:b3:9d:76:3b:86:88:d9:92:3d:e6:81:02:4e:4a:dd:50:
c4:43:01:38:66:61:dc:0c:e4:47:3d:e4:8f:c0:d5:6a:d1:b9:
0d:ea:1e:7f:57:36:81:6f:be:6b:7d:2b:17:e8:27:0e:5f:bd:
04:91:00:92:f7:41:34:2b:82:c8:ad:48:ba:81:ed:83:49:73:
04:fa:23:ac:6a:8c:78:b1:8a:b8:a7:80:6b:71:1c:4c:9a:4f:
73:8b:60:5a:f6:3d:b7:38:fd:3c:f4:42:3c:26:5f:4c:68:47:
4b:c3:80:c7:83:38:5c:53:d9:19:a9:82:64:52:b7:d9:a1:da:
4d:85:ec:da:a1:66:e9:55:69:08:b1:8e:f6:eb:81:51:aa:ca:
0e:2a:4e:7f:7e:5b:d4:83:cc:ac:d6:25:3c:f0:43:d0:3b:3f:
a6:41:57:e1:e0:d3:8e:e3:57:be:22:5a:40:a0:ef:72:0a:e0:
25:26:67:6a:2a:9a:f2:fd:62:d8:d2:3d:98:5c:ed:c3:ca:e0:
b8:e1:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:52 2026 by rpki-client